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REMARKS 

Entry of this Request for Reconsideration is proper because it does not raise any new 
issues requiring further search by the Hxarniner, narrows the issues on appeal, and is believed to 
place the present application in condition for immediate allowance. 

Claims I and 3-28 are all the claims presently pending in the application. No claims have 
been amended. 

Claims 24, 25, and 27 stand rejected under 35 U.S.C. § 103(a) as being unpatentable over 
Urata (U.S. Patent No. 6,799,272) in view of Kawan (U.S. Patent No. 6,289,324). 

Claims I, 3-7, 9-14, 23, and 26 stand rejected under 35 U.S.C. § 1 03(a) as being 
unpatentable over Urata in view of Kawan, and further in view of Perlman et al. (U,S, Patent No. 
5,261,002; hereinafter "Perlman"). 

Claims 8 and 15-22 stand rejected under 35 US.C. § 103(a) as being unpatentable over 
Urata in view of Kawan, and further in view of PerJman, and further in view of Schncicr, 
" Applied Cryptography: Protocols. Algorithms, and Source Code in C ". Second Edition, pps. 
466-474 (hereinafter, "Schncicr"). 

These rejections are respectfully traversed in the following discussion. 

I. THE CLAIMED INVENTION 

In conventional methods and systems, counterfeiting/duplication is not rendered difficult 
since confidential i^ the card and an unscrupulous person may find the 

information simply by looking at or reading the energy construction inside of the card. That is, 
with a plurality of readings of the card, the information held within the card can be easily 
detected (e.g., see specification at page 3, line 19, to page 4, line 2). 
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The claimed invention, on the other hand, complements the conventional smart-card-tvpc 
of security , which is often all carried on the card itself, by providing extra protection depending 
on cryptography, with the cryptographic structure (e.g., a key) not being carried bv the card and 
which cann ot be accessed completely bv a predetermined small number of readings . Moreover, 
the cryptographic structure can only be built by whoever emits the card or the agent thereof (e.g.. 
sec specification at page 4, lines 9-13), 

The claimed invention, in addition to preventing the creation of f alse i^ards different from 
the legitimate ones, also prevents the fabrication of clones ofa given legitimate smart card. Chat 
is, the present invention also provides a mechanism of protection designed to prevent and/or 
discourage both copying and creation of new cards (e.g., see specification at page 4 ? lines 14-1 7). 

For example, in an illustrative, non-limiting embodiment of the invention, as defined by 
independent claim, 1, a method of preventing counterfeiting ofa smart card includes providing a 
smart card with a cryptographic structure to r authonyi ng the smart card which cannot be 
accessed completely bv a predetermined small number of readings, wherein said cryptographic 
structure can be built only bv whoever emits the card or an agent thereof . The method further 
includes providing a reader for reading the smart card and including a database holding 
information related to unauthorized smar t cards . The reader is on-line , such that the reader is 
operativelv connected to a network, only when the database of the reader is being updated bv the 
network. 
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II. THE PRIOR ART REJECTIONS 

A. Urata (U.S. Patent No. 6,799,272) 

Urata relates to a method and system for authenticating a remote device. Particularly, 
Urata discloses that a remote device and an authentication center each store an identical key code 
index which includes a plurality of key code numbers . The remote device and authentication 
center communicate with each other through first and second keys, that each sped fy a particular 
key code number from the key code index. 

Specifically, the remote device translates the first key received from the authentication 
center to determine the particular key code number and then generates a second key also 
specifying the particular key code number. Thereafter, the authentication center translates the 
second key to determine a second key code and compares the first and second key code numbers. 
If the two key code numbers match, the remote device is authenticated. 

The remote device may be, for example, (1) a wireless telephone, (2) a smartcard or (3) a 
credit card used in conjunction with an Internet access device such as a personal computer (PC) 
and the authentication center may be, for example, a wireless base station or a credit/smartcard 
authentication center (e.g M see Urata at column 2, lines 31-52). 

B. Ka» an (U.S. Patent No. 6,289,324) 

Kawan relates to a financial information and transaction system comprising a host 
financial computer system, which maintains records of user account information, and at least one 
terminal providing a user interface for accessing the host financial computer system. The 
terminal includes a means for transmitting and receiving data corresponding to the user account 
information, and a smart card interface device ^ 
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Kawan discloses that a financial information and transaction system includes a host 
financial computer system, which maintains records of user account information, and at least one 
terminal providing a user interface for accessing the host financial computer system. 

The terminal includes a means for conducting a transaction based on the user account 
information, a smart card interface device, and a smart card (e.g., sec Kawan at Abstract). 

Kawan discloses that encryption and decryption, also called ciphering and deciphering, 
prevent someone from counterfeiting a smart card as long as the encryption kevs are known only 
to the issuer of the smart card and the entity supporting the ATM and merchant terminal system . 
If the smart card's result is the same string with which the ATM or merchant terminal started, the 
smart card is authenticated and the desired transaction may proceed (e.g M see Kawan at column 
9, lines 36-43). 

C. Perlman et al. (U.S. Patent No. 5*261,002) 

Perlman relates to a technique for issuing and revoking user certificates of authenticity in 
a public key cryptography system, wherein certificates do nut need expiration dates, and the 
inconvenience and overhead associated with routine certificate renewals arc minimized or 
avoided entirely (e.g M see Perlman at Abstract). 

To deal with authentication problems, Perlman discloses that many systems use 
authentication certificates . Perlman discloses that the basic function of authentication 
certificates is to vouch for the relationship between a public key and the person or entity to 
which it belongs . Perlman defines a "certificate" as a cryptographically signed message 
indicating that a trusted authority vouches for the relationship between a public key and a named 
principal or owner of the key. Each certificate is "signed" by the trusted authority, known as the 
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Certification Authority, to ensure authenticity of the certificate itself . Certificates may be held 
by their owners, who present copies to other users with whom they wish to communicate, or may 
be posted in a public place. The certificates may also employ a public key cryptography system 
to produce digital signatures, but this need not necessarily be the same system as the one for 
which keys arc being published. 

For complete network security, every user must have a certificate. Sometimes, however, 
it is necessary to invalidate certificates; for example, when an employee is fired or transferred, or 
when a password falls into the wrong hands. There arc two common mechanisms for 
accomplishing this: (1 ) issuing certificates wilh expiration d ates that define relatively short 
validity periods, and (2) establishing a "blacklist" of invalid certificates (e.g., see Pcrlman at 
column 2, lines 28-68). 

With respect to (2) above, Perlman discloses that the Certification Authority issues a 
signed "blacklist" periodically or on demand, containing a list of the certificate s that havebeen 
issued in the oast, but which are now to be considered invalid . Since the blacklist will normally 
be short, it can be issued with much greater frequency than the individual certificates. Anyone 
who wishes to verify that a certificate is valid must first check that the certificat e has not expired, 
and then thai the certificate is not included in a current blacklist issued by the Certification 
Authority (e.g., see Perlman at column 3, lines 1-40). 

To allegedly improve over the related art described in Perlman above, Pcrlman discloses 
a method for authenticating users of an information system and, more specifically, users of a 
public key cryptography system. In the method described by Perlman, certificates are not 
required to have an expiration date , so much of the inconvenience of periodic certificate 
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renewals is avoided. Instead, a blacklist has a start date and an expiration date, and any 
certificates issu ed prio r to the start date are automatically considered invalid . 

The Perlman method includes a first step of issuing u signed certificate for each user of 
the system, wherein the signed certificate contains an issue date and any other desired public 
information pertaining to the user, such as a public key, issuing a signed blacklist containing a 
blacklist start date, a blacklist expiration date, and an entry for each user whose certificate was 
issued after the blacklist start time and is to be considered invalid. Perlman then discloses a 
second step of determining whether a user's certificate is valid by first obtaining a copy of the 
certificate and a copy of the signed blacklist, then determining whether the certificate issued after 
the blacklist start date and is not on the blacklist^ in which case the certificate is presumed to be 
valid (e.g*, see Perlman at column 3, lines 64-68, and column 4, lines 1-18). 

Thus, Perlman relates to authentication certificates that do not require expiration dates, 
thereby avoiding the inconvenience and overhead associated with frequent certificate renewals. 
When the blacklist becomes too long, it can be shortened by choosing a new blacklist start date, 
and issuing renewed certificates to replace old valid certificates issued prior to the new blacklist 
start date. 

Perlman states that the principal advantage of the invention is that certificates must be 
issued only when the blacklist gets too long . In the prior art, certificates must he issued 
periodically, where the period is determined by the time in which the blacklist might get too long 
{e.g., see Perlman at column 4, lines 63-68, and column 5, lines 1-10). 
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I). Schneier, " Applied Cryptography: Protocols, Algorithms, and Source Code 
in C "» Second Edition, pps. 466-474. 

Schncicr is a treatise on public-key algorithms. 

E. THE PRIOR ART REJECTIONS 

With respect to claim 1 , the Examiner asserts that Urata discloses "providing a smart card 
with a cryptographic structure for authorizing the smart card which cannot be accessed 
completely by a predetermined small number of readings" at column 2, lines 32-52 (see Office 
Action at page 1 7, first paragraph). 

The Examiner states that this passage of Urata shows a key code index being contained in 
the smart card. The Examiner asserts that this key code index cannot be completely accessed by 
a small number of readings and does not contain any confidential information as recited in other 
aspects of the claimed invention. The Examiner further alleges that Figure 1 of Urata shows the 
key code index with its many entries (see Office Action at page 17, first paragraph). 

On the other hand, with respect to the claimed recitation "wherein said cryptographic 
structure can be built only by whoever emits the card or an agent thereof, the Examiner alleges 
that Kawan discloses the cryptographic structure can be built only by whoever emits the card or 
an agent thereof (see Kawan at column 9, lines 36-43). The Examiner states that this passage of 
Kawan shows that the smart cards can be impervious to counterfeiting as long as the keys (or 
cryptographic structure) are known only to the issuer of the smart card and the entity supporting 
the ATM and merchant terminal system. The Examiner asserts that this passage provides a 
motivation to make sure that no one, except for the agent of the card, may build the 
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cryptographic structure, whether it be a set of keys as disclosed in Kawan, or a key code index as 
disclosed in Urata (see Office Action at page 1 7, second paragraph). 

With respect to "providing a reader for reading said smart card and including a database 
holding information related to unauthorized smart cards, said reader being on-line, such that said 
reader is operatively connected to a network, only when said database of said reader is being 
updated by said network", as recited in claim 1 , the Examiner states thai Kawan is being cited For 
disclosing a smart card reader (Figure 2, 210), not Perlman. The Examiner states that Pertman 
was added to show the feature of blacklists and periodic updates (see Office Action at page 1 6, 
second fiill paragraph). 

A. Applicants respectfully submit, however, that it would not have been obvious to 
combine the teachings of these four references, Urata, Kawan, Perlman, and Schneier, either 
individually or in combination, to in order to arrive at the claimed invention . Moreover, 
Applicants submit that, even assuming arguendo that it would have been obvious to combine 
these references, there are elements of the claimed combination which are not disclosed or 
suggested by Urata, Kawan, Perlman, and Schneier, cither individually or in combination. 
Therefore, Applicants respectfully traverse these rejections. 

Applicants note that the references as a whole must be considered for what they fairly 
teach to the ordinarily skilled artisan. Moreover, merely identifying individual elements of the 
claims in separate references is not sufficient to establish the obviousness of the claims. The 
Office Action must establish a reasonable motivation or suggestion, in the references themselves 
or in the art. in general, for combining the references to arrive at the claimed invention . 

Indeed, Applicants note that, the mere fact that references could for can) be combined or 
modified is not sufficient to establish prima facie obviousness (see M.P.E.P. § 2143.01). There 
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must be a reasonable motivation, in the references themselves or in the art in general, to do that 
w hich the patent Applicants have done . 

Applicants respectfully submit that (at best) the alleged combination of the cited 
references would be a smart card which uses the cryptographic schemes of Kawan to protect 
secret info rmation or messages on the smart card of Urata, in which the user or owner of the 
smart card is issued an authentication certificate to vouch for the relationship between a public 
key and the person or entity to which it belongs (e.g., see Perlman at column 2, lines 37-4 1 ). 

However, this resulting combination merely is comparable to conventional cryptographic 
schemes used with smart cards to protect the confidential information on the smart card and the 
use of authentication certificates as described by Perlman to confirm that the relationship 
between a public key and the named principal or owner of the key (e.g., see Perlman at column 
2, lines 37-41). 

Thus, Applicants submit that the claimed invention clearly would not have been obvious 
from any combination of Urata, Kawan, Perlman, and Schneier, either individually or in 
combination, 

B. Applicants submit, however, that even assuming arguendo that the ordinarily 
skilled artisan would have been motivated to combine the cited references, the resulting 
combination of the prior art of record still would not have lead the ordinarily skilled artisan to 
arrive at the particular features recited in the claims. 

For example, in rejecting independent claim 1, the Examiner relies on Urata, Kawan, and 
Perlman. However, with respect to dependent claims 5 and 6, the Examiner additionally relies 
on Mcnczcs, ct aL, which is described by Applicants in the Summary of the Invention (e.g., see 
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specification at page 6, lines 1-8) but not specifically included in the rejection of claims 5 and 6, 
to make up for the deficiencies of Urata, Kawan, anil Perlman. 

That is, the alleged combination of Urata, Kawan, and Perlman clearly does not arrive at 
ail of the features of the claimed invention, as recited, for example, in claims 5 and 6. Instead, 
the Examiner further modifies the combination of three references (Urata, Kawan, and Perlman) 
based on Menezes lo try to establish the obviousness orthese claims. 

Applicants submit, however, that modifying the alleged combination of three references 
in further view of a fourth reference, Menezes, which is described by Applicants in the Summary 
of the Invention, supports Applicants* position that the specific features of the claimed invention 
would not have been obvious from the alleged combination of Urata, Kawan, and Perlman. 

Applicants note that the Examiner must consider the invention as a whole* including the 
specific features recited in the claims and cannot distill the invention down to a gist of the 
invention (e.g., see MPEP 2141 .02), 

Applicants submit that the Examiner's reliance on Menezes to make up for the 
deficiencies of Urata, Kawan, and Perlman (which clearly do not disclose or suggest the specific 
features recited in claims 5 and 6) weighs against the Examiner's assertion that the claimed 
invention would have been obvious from the combination of Urata, Kawan, and Perlman. 

That is, Applicants respectfully submit that the references themselves do not suggest the 
claimed combination. Rather, the references merely disclose (at best) individual elements of the 
claims. Indeed, the claimed combination of such individual elements does not appear to be 
suggested anywhere except Applicants' own disclosure (i.e., impermissible hindsight based 
analysis). 
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'I"hus, Applicants respectfully submit that Urata, Kawan, Perlman, and Schneier, either 
individually or in combination, do not disclose or suggest all of the features of the novel and 
unobvious combination of elements of the claimed invention, as recited in claim 1 . Therefore, 
Applicants further submit that the alleged combination of references, even if combined in the 
manner alleged by the Fxaminer, would not arrive at the claimed invention. 

Therefore, Applicants respectfully request that the Examiner withdraw the rejections and 
permit claims 1 and 3-28 to pass to immediate allowance. 

(II. CONCLUSION 

In view of the foregoing, Applicants submit that claims 1 and 3-28, all the claims 
presently pending in the application, are patentably distinct over the prior art of record and are in 
condition for allowance. The Examiner is respeclfully requested to pass the above application to 
issue at the earliest possible time. 

Should the Examiner find the application to be other than in condition for allowance, the 
Examiner is requested to contact the undersigned at the local telephone number listed below to 
discuss any other changes deemed necessary in a telephonic or personal interview. 
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The Commissioner is hereby authorized (o charge any deficiency in fees or to credit any 
overpayment in fees lo Assignee's Deposit Account No, 50-0510. 


MCGINN INTELLECTUAL PROPERTY 
LAW GROUP, PLLC 
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Customer No. 21254 
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